Effective date: September 27, 2026
Operator and scope
Scaffold (스캐폴드) operates the namu website and Namu Owner app from Korea. This policy covers customer reservations and shop operator accounts. The selected shop provides the actual service and may also have its own privacy obligations. Contact fred@namu-therapy.com for support or bread@namu-therapy.com for privacy and data-rights requests.
Information we process
• Accounts: email, authentication information, name, shop memberships, roles and invitations. • Reservations: guest and companion names, email, visit time, services and prices, therapist, selected care areas and requests, booking status and reviews. • Shop administration: business name, address and contact details, staff descriptions/photos, menu images and opening information. • Optional push: installation identifiers/tokens, OS/language, linked account, preferences and delivery records. • Service usage: browser/device identifiers, IP-derived approximate location, page/function events, errors, performance and security records. • Support and rights requests: contact information, request, verification and outcome. We do not request device contacts, precise GPS location or payment-card information. Do not enter unnecessary sensitive information or national identification numbers in free-text fields.
How we use information
We use information for authentication and access control, reservations and changes/cancellations, shop services, transactional notices, reviews, selected notifications, support and data rights. We also process necessary information for product analytics, functionality, error handling and fraud prevention. Reservation information needed to provide the service is available to the selected shop and authorized staff. We do not use it for advertising tracking or data sales.
Retention and erasure
Account information is kept while needed to operate the account; unnecessary identity and access are removed during deletion. Shared shop records belonging to other customers or staff are handled separately. We erase information without delay when its purpose ends and segregate records that must be retained by law. Where Korean e-commerce rules apply to the particular records, the periods are six months for advertising, five years for contracts/withdrawals and payment/supply, and three years for consumer complaints/disputes. This does not impose a blanket five-year hold on profiles. Legally required security/access-permission records follow their applicable periods. Notification inbox/events become eligible for cleanup 90 days after creation and delivery diagnostics 30 days after their final outcome. Inbox/events remain until linked delivery work and its diagnostic retention have ended. Current PostHog product-event retention is one year. Existing session recordings have a 30-day setting; the new release does not record new sessions. Current Supabase database recovery backups and managed service logs have seven-day windows; Vercel runtime logs have a 30-day window. Erasure records are reapplied before restored data is served. Electronic records are removed from active systems; backup copies expire under the recovery windows above. The result identifies any retained records, basis and expiry.
Service providers
Supabase Pte. Ltd. provides authentication, database and image storage. Vercel Inc. hosts and delivers the website and server functions. PostHog Inc. provides analytics, feature configuration and error/performance analysis. Resend (Plus Five Five, Inc.) sends email, which can include the name, reservation details and care requests needed for the notice as well as the recipient address. Optional mobile notifications pass through Expo (650 Industries, Inc.) and Apple APNs or Google Firebase Cloud Messaging. Consented AI functions use the selected direct API provider: Anthropic PBC, OpenAI, or Google's paid Gemini API. If an Experimental ai-gw route is separately enabled, a separate Namu-operated ai-gw server may process synthetic test inputs and outputs and forward them through the Codex or Antigravity CLI to the selected model service. This is a Namu system, not another external processor. Production shop and customer data is not sent through this route. An optional Google Business Profile connection processes the connected Google account and shop information.
International processing
Necessary information is sent over encrypted networks when you use the service or selected feature. Supabase and website function execution are in Singapore. Vercel delivery/support can use distributed locations. PostHog analytics and Resend mail storage/delivery are in the United States. Anthropic API storage is in the US; model execution can use its global processing locations. Selecting OpenAI or Google's paid Gemini API can also send request content to those providers' processing infrastructure abroad. Expo, APNs and Firebase use their providers’ global infrastructure. Staff at your selected shop may also access reservation details from abroad. With the Experimental ai-gw route, synthetic test inputs and outputs may pass through Namu’s separate server before reaching a model service abroad. The personal CLI account’s data retention, review and product-improvement terms may differ from the direct API terms described above. Production shop and customer data is not sent. The purposes and data are described above; service retention and the providers’ applicable contractual periods apply. Standard Anthropic commercial API inputs/outputs are held for up to 30 days, with safety/legal exceptions. OpenAI API inputs and outputs are not used for model training without a separate opt-in; abuse monitoring logs may ordinarily be held for up to 30 days. Google's paid Gemini API does not use inputs and outputs to improve products, but may log them for a limited period for safety, security and legal duties. Resend publishes a standard 30-day email/log window for Free, Pro and Scale plans; a separate contract can set a different period. Firebase installation identifiers can take up to 180 days to be removed from live/backup systems after deletion, separately from revoking the app’s push token. Contact bread@namu-therapy.com with transfer questions, objections or deletion requests. Declining processing needed for account/reservation services may prevent providing those services. Optional AI and push are not required for basic shop management. Provider contacts: Supabase: privacy@supabase.com · Vercel: privacy@vercel.com · PostHog: privacy@posthog.com · Resend: support@resend.com · Anthropic: privacy@anthropic.com · OpenAI: privacy.openai.com · Google Gemini: policies.google.com/privacy · Expo: expo.dev/contact · Apple: apple.com/legal/privacy/contact · Google Firebase: firebase.google.com/support/privacy
Cookies and analytics
We use cookies needed to maintain sign-in and identifiers for product analytics. The PostHog analytics identifier cookie lasts 365 days. Browser settings can remove/restrict cookies, which may affect sign-in; a new identifier may be created on a later visit. The app currently has no separate switch to stop all analytics. The analytics provider’s AI training and external AI-analysis settings have been turned off; that change does not retroactively erase historical data. The new release disables automatic capture of on-screen text/elements, heatmaps and dead/rage-click analytics. Necessary pageviews, explicit feature-use events and feature-configuration analytics remain enabled.
Optional AI features
Before menu-image extraction or assisted profile writing/translation, we show what will be sent and identify the currently configured direct API recipient (Anthropic, OpenAI or Google Gemini), then request permission for each action. Without confirmation, we do not send it; manual entry and saving remain available. You must have the necessary authority when providing another person’s photo or description. Automatic background translation and AI photo transformation are not provided in this release. The Experimental ai-gw route is not used for production shop or customer data and is available only for synthetic data in the Staff developer test console.
Protection and policy changes
We use encrypted transport, account/shop access controls, permission checks and processing records, and restricted backup access. We update this page and its effective date when the policy changes and obtain separate consent where required. In Korea, privacy complaints can also be raised with KISA (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
Access, correction, deletion and withdrawal
You or an authorized representative may request access, correction/deletion, restriction of processing or withdrawal of consent. We request only the identity verification needed to handle the request. Use the app/website account-deletion page or contact our privacy handler. Push can be disabled in the app and device settings. Transactional/security messages differ from marketing, so not every email has an unsubscribe link. Ask bread@namu-therapy.com to review a disputed outcome.
Owner withdrawal and outcomes
Within ten days of receiving a request, we provide the correction/deletion result or an applicable statutory reason and objection route. Receipt does not mean immediate erasure. A sole owner may request deletion; the operator checks outstanding reservations and shop transfer or closure. Other parties’ shared records and legally retained records are handled separately. Reassignment does not restart the original response deadline.
Operator contacts and email
Shop owner and manager account emails, shop relationships, roles and active status are used for operational contact and access management. Only active master staff can search, read or export the directory, send email and read its history. Minimum audit records cover actor, purpose, time, target scope, counts and outcome. New feature audits and consent/withdrawal change history are deleted two years after creation. Current preferences are kept as needed during account operation; preferences, history and identifying information in sending records are erased when the account is deleted. Email matching identifiers, unsubscribe link identifiers and sending/processing outcomes are used without duplicating raw email in consent records. Service news, benefits and promotions require separate explicit consent, are limited to four marketing emails per month and default to no consent. Refusal or withdrawal does not affect basic shop management. Withdraw free of charge in email preferences, through a marketing email unsubscribe link or at bread@namu-therapy.com. Necessary booking, invitation and security notices are handled separately. Marketing sends and exports for external upload stay disabled until international transfer grounds and notice conditions are confirmed; transfers requiring consent use a separate choice. Downloaded contact copies must be limited to their stated purpose and deleted when that purpose ends.
Support: fred@namu-therapy.com · Privacy and deletion: bread@namu-therapy.com